Коммутатор CISCO Catalyst 1000 48port GE, Full POE, 4x1G SFP

Коммутатор Catalyst 1000 48port GE, Full POE, 4x1G SFP

Описание:

Cisco Catalyst 1000 - это сетевой коммутатор корпоративного класса в фиксированной конфигурации, ориентированный на малые предприятия и филиалы. Устройство работает на операционной системе Cisco IOS, которая обеспечивает расширенный функционал безопасности, высокую эффективность и надёжность работы, а также простое управление сетевым оборудованием и сетью вцелом через интерфейс командной строки или встроенный веб-интерфейс. 

Технические характеристики

Аппаратная часть коммутатора

Функционал:

Network security

Cisco Catalyst 1000 Series Switches provide a range of security features to limit access to the network and mitigate threats, including:

●      Comprehensive 802.1X features to control access to the network, including flexible authentication, 802.1X monitor mode, and RADIUS change of authorization.

●      802.1X support with Network Edge Access Topology (NEAT), which extends identity authentication to areas outside the wiring closet (such as conference rooms).

●      IEEE 802.1X user distribution, which enables you to load-balance users with the same group name across multiple different VLANs.

●      Ability to disable per-VLAN MAC learning to allow you to manage the available MAC address table space by controlling which interface or VLANs learn MAC addresses.

●      Multidomain authentication to allow an IP phone and a PC to authenticate on the same switch port while being placed on the appropriate voice and data VLANs.

●      Authentication, Authorization, and Accounting (AAA) command authorization in PnP to enable seamless PnP provisioning.

●      Access Control Lists (ACLS) for IPv6 and IPv4 security and Quality-of-Service (QoS) ACL elements (ACEs).

●      Port-based ACLs for Layer 2 interfaces to allow security policies to be applied on individual switch ports.

●      SSH, Kerberos, and SNMP v3 to provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH, Kerberos, and the cryptographic version of SNMP v3 require a special cryptographic software image because of U.S. export restrictions.

●      SPAN, with bidirectional data support, to allow the Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.

●      TACACS+ and RADIUS authentication to facilitate centralized control of the switch and restrict unauthorized users from altering the configuration.

●      MAC address notification to notify administrators about users added to or removed from the network.

●      MAC Authentication Bypass (MAB) and WebAuth with downloadable ACLs to allow per-user ACLs to be downloaded from the Cisco Identity Services Engine (ISE)as policy enforcement after authentication using MAB or web authentication in addition to IEEE 802.1X.

●      Web authentication redirection to enable networks to redirect guest users to the URL they had originally requested.

●      Multilevel security on console access to prevent unauthorized users from altering the switch configuration.

●      BPDU Guard to shut down Spanning Tree PortFast-enabled interfaces when BPDUs are received, to avoid accidental topology loops.

●      IP Source Guard to restrict IP traffic on nonrouted Layer 2 interfaces by filtering traffic based on the Dynamic Host Configuration Protocol (DHCP) snooping binding database or by manually configuring IP source bindings.

●      SSH v2 to allow use of digital certificates for authentication between user and server.

●      Spanning Tree Root Guard (STRG) to prevent edge devices that are not in the network administrator’s control from becoming Spanning Tree Protocol (STP) root nodes.

●      Internet Group Management Protocol (IGMP) filtering to provide multicast authentication by filtering out nonsubscribers and to limit the number of concurrent multicast streams available per port.

●      Dynamic VLAN assignment through implementation of VLAN Membership Policy Server client capability to provide flexi